Privacy Policy of Good Feels
Effective date: September 29, 2026
This website (“Site”) is committed to protecting the privacy and security of our users. This Privacy Policy describes how we collect, use, and disclose information about you when you visit our Site or interact with our App.
Privacy update notice: Our September 16, 2026 update added information about potential data licensing for research and AI development. This September 29, 2026 update clarifies those disclosures, retention criteria, and privacy-request procedures. See the licensing and privacy-choices sections below. These updates do not waive your privacy rights or provide consent where separate consent is required.
This policy describes our practices; it is not a request for blanket consent or a waiver of your privacy rights. Publishing a policy update or continuing to use our services does not, by itself, provide consent where affirmative consent is required or authorize a new use inconsistent with promises made when information was collected.
Age Requirement
Our cannabis products are intended solely for adults 21 years of age or older and are available through licensed Massachusetts dispensaries. This Site is not directed to anyone under 21.
We do not knowingly collect personal information from anyone under 21. If we discover that we have inadvertently done so, we will promptly delete it, subject to applicable legal obligations. If you believe someone under 21 has submitted personal information to us, please contact hello@getgoodfeels.com.
Information We Collect
We may collect personal information that you provide to us when you visit our Site, such as your name, email address, and any other information you choose to provide. We may also collect information automatically when you visit our Site, such as your IP address, browser type, and device type.
Loyalty program. If you enroll in the Good Vibes rewards program, we collect enrollment information you provide, which may include your name, email address, date of birth, and enrollment consents, as well as records of product codes scanned and rewards redeemed. We use this information to administer the program and rewards.
Communications. We collect messages you send through contact forms, email, and SMS, subject to the SMS-specific restrictions below.
How We Use Information
We may use the information we collect to:
- Provide and improve our services
- Communicate with you
- Customize your experience on our Site
- Analyze how our Site is used
We may also share your information with third-party service providers who assist us in operating our Site and providing our services.
Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this policy, subject to applicable law. We determine retention periods based on the type and sensitivity of the information, the duration of your account or loyalty membership, the time needed to fulfill orders and resolve inquiries, applicable accounting and legal obligations, fraud prevention, and the need to establish, exercise, or defend legal claims.
Marketing contact information is used until you unsubscribe or it is no longer needed for permitted marketing purposes. After you opt out, we may keep limited information needed to honor your preferences and document compliance. Cookie and usage-data retention depends on the purpose of the cookie or technology and the relevant service settings. When information is no longer needed, we delete it or deidentify it in accordance with applicable law.
Disclosure, Licensing, and Sale of Information
We may disclose, license, or sell contact identifiers, commercial information such as purchase and loyalty-program activity, internet or network activity, and communications collected through our services to data-licensing partners, research organizations, and companies developing artificial intelligence or machine-learning systems. These recipients may use the information for analytics, research, product development, and the development, training, testing, or improvement of those systems. We do so only as permitted by applicable law and consistent with the notices and permissions applicable when the information was collected. Before a new use or disclosure, we provide additional notice and obtain consent where required, and honor applicable opt-outs and other privacy rights.
This licensing does not include account passwords, payment-card details, mobile phone numbers, SMS-program data, SMS opt-in data, or SMS consent. Existing restrictions on SMS-related information remain in effect.
We may also create and disclose aggregated or deidentified information. For information treated as deidentified under applicable law, we take reasonable measures to prevent it from being associated with an individual, maintain and use it in deidentified form without attempting to reidentify it except as permitted by law to assess our deidentification processes, and contractually require recipients to comply with applicable deidentification restrictions. Pseudonymized information may still be personal information and remains subject to applicable privacy protections; replacing names or other identifiers does not by itself make information anonymous.
Your Privacy Choices
Depending on where you live, you may have the right to request access to, correction or deletion of, or a copy of your personal information, and to opt out of certain sales or sharing of personal information. We will not discriminate against you for exercising these rights.
To submit a privacy request or opt out, email hello@getgoodfeels.com with the subject line “Privacy Rights Request” or “Privacy Opt-Out Request.”
We respond within the deadlines required by applicable law. Where the California Consumer Privacy Act applies, we acknowledge requests to access, correct, or delete information within 10 business days and generally respond within 45 calendar days. If a permitted extension is necessary, we notify you within the initial 45-day period and explain the reason; the total response period will not exceed 90 calendar days. We process requests to opt out of sale or sharing as soon as feasibly possible and no later than 15 business days where required by that law. Other applicable laws may provide different or shorter deadlines.
We may request information reasonably necessary to verify access, correction, or deletion requests. We do not require identity verification for requests to opt out of sale or sharing. You may designate an authorized agent, subject to applicable authorization requirements. If we decline a rights request, you may appeal by replying to our response. We will handle appeals within the deadlines required by applicable law.
Where applicable law requires us to honor an opt-out preference signal, we treat a recognized signal such as Global Privacy Control (GPC) as a request to opt out of sale or sharing. The request applies to the browser or device sending the signal and, where required and we can associate it with you, to your known profile. You can also email hello@getgoodfeels.com with the subject line “Privacy Opt-Out Request.”
Cookies
We may use cookies and other tracking technologies to collect information about your use of our Site. Cookies are small data files that are stored on your device when you visit a website. You can disable cookies in your browser settings, but this may limit your ability to use certain features of our Site.
Third-Party Links
Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policies of those websites before providing any personal information.
Security
We take reasonable technical and organizational measures to protect personal information from unauthorized access, use, disclosure, alteration, or destruction, including encryption in transit and access controls. No security system is completely foolproof, and we cannot guarantee the security of your information.
In the event of a data breach, we will notify affected individuals and relevant authorities as required by applicable law, including Massachusetts General Laws Chapter 93H.
SMS Privacy Policy
This section of our Privacy Policy specifically addresses the practices regarding SMS (Short Message Service) communications.
Use of SMS
We may send SMS messages to your mobile device for purposes including marketing communications, transactional updates, and reminders, subject to your explicit consent.
Data Handling in SMS Program
We collect information such as your mobile phone number and engagement with our SMS messages. This data is used exclusively for managing and delivering our SMS communications and will not be shared with third parties for their marketing purposes.
SMS Abandoned Cart Disclosure
Our website employs cookies and other tracking technologies to monitor items in your shopping cart. If a cart is abandoned, we may use this information to send you SMS reminders. This practice is part of our commitment to offering a convenient shopping experience.
Third-Party Data Sharing Exclusions
Your SMS-related data, including your phone number and SMS opt-in consent, is not shared or sold to third parties for marketing purposes. Our sharing of personal data with third parties does not include SMS opt-in data and consent.
Location Tracking and Location-Based Services
If our services involve location tracking or location-based services, we will transparently describe the data collection methods and the purposes for which it is used, including any implications for our SMS services.
Changes to this Privacy Policy
We may update this policy from time to time. We will post the revised policy with its actual revision date. For material changes, we will provide a clear notice on our website or by email, as appropriate, and obtain consent where required before introducing a new use inconsistent with prior notices or promises.
Contact Us
If you have any questions or concerns about our Privacy Policy, please contact us at hello@getgoodfeels.com.